Anand Krishnamoorthi 4d35744c4f feat(rvm): implement Azure Policy condition evaluation (#661) ...

Add VM support for Azure Policy's condition operators and allOf/anyOf
short-circuit logic, gated behind cfg(feature = "azure_policy").

Policy conditions (equals, contains, like, match, exists, and their
negations — 21 total) are encoded as a single PolicyCondition
instruction with a PolicyOp sub-opcode rather than bloating the
Instruction enum with 21 variants. The dispatch handles Azure Policy's
quirky comparison semantics: case-insensitive string comparison,
string↔number coercion, null vs undefined distinction, and element-wise
collection membership.

allOf/anyOf blocks use four instructions — LogicalBlockStart,
AllOfNext/AnyOfNext, and LogicalBlockEnd — that wire up a result
register and short-circuit on the first failing (allOf) or passing
(anyOf) child.

Helper functions for case-folded comparison, wildcard/glob matching, and
type coercion live in builtins::azure_policy::helpers.

Two YAML test suites (~2200 lines) exercise the full operator matrix and
the allOf/anyOf control flow.

2026-04-07 19:04:24 -05:00

..

rego

Fix RVM evaluation of default-only rules (#664)

2026-04-07 11:38:50 -05:00

vm

feat(rvm): implement Azure Policy condition evaluation (#661)

2026-04-07 19:04:24 -05:00

compiler.rs

refactor: consolidate RVM instruction variants and clean up VM internals (#651)

2026-04-01 05:34:33 -05:00

mod.rs

RVM compiler & runtime optimizations: caching, instruction fusion, constant hoisting, and correctness fixes (#626)

2026-03-23 21:00:51 -05:00